Privacy Policy

1. Who We Are

GuideSora operates from Sri Lanka and is being developed as an academic-support platform. The current public website is primarily informational and provides an early-access waitlist; it does not currently provide access to the GuideSora product.

The operator is GuideSora. For privacy questions, contact hello@guidesora.com. We handle personal information subject to applicable data-protection requirements, including Sri Lanka’s Personal Data Protection Act No. 9 of 2022, as amended, where applicable.

2. Information We Collect

The early-access form asks for:

• Your name (required).
• Your email address (required).
• Your country (required).
• Your field of study (optional).

We also store a normalized version of your email address to prevent duplicates, your waitlist status, signup and update timestamps, and a confirmation-email send timestamp when the mail server accepts the message. That timestamp does not prove inbox delivery or verify ownership of your email address.

If you email us, we receive your email address and the information you choose to include in your enquiry. Please avoid sending sensitive information that is unnecessary for your request.

We do not intentionally store visitor IP addresses in the GuideSora waitlist database. Hosting and security providers may process technical information, such as network and browser information, to deliver and protect their services. We may keep limited operational security records, such as verification outcomes. No analytics platform or advertising tracker is currently implemented on this website.

3. Why We Use This Information

• Manage early-access registrations and prevent duplicate registrations.
• Send registration confirmations and relevant GuideSora early-access or product updates.
• Operate and secure the website and prevent automated abuse.
• Respond to enquiries and privacy requests.
• Meet applicable legal obligations.

We do not use waitlist information for advertising.

4. Cloudflare Turnstile

We use Cloudflare Turnstile to protect the waitlist from automated abuse. Turnstile may process technical and security information needed to distinguish human visitors from automated traffic.

GuideSora sends the verification token to Cloudflare for validation; we do not send your name, email address, country or field of study to Cloudflare as part of that validation request. Cloudflare may receive network and browser information directly when its widget loads.

Read Cloudflare’s Turnstile privacy information for more about its processing.

5. Hosting and Service Providers

We currently use Hostinger for website hosting, database and email infrastructure, and Cloudflare for Turnstile security verification. These providers process information needed to deliver their services, subject to their service arrangements and applicable requirements.

Registration confirmation emails are sent through authenticated email infrastructure using PHPMailer, a server-side software library. PHPMailer is not an additional hosted service receiving your information.

6. Email Communications

Joining the early-access list may result in a registration confirmation and future GuideSora early-access or product updates when there is news to share. Registration does not grant product access.

You can request removal from the early-access list and future early-access communications by contacting hello@guidesora.com.

7. Data Retention

We retain waitlist information for as long as reasonably necessary to manage early access, communicate relevant updates, maintain legitimate operational records, or meet applicable legal obligations. We consider the purpose of the information and applicable requirements when deciding whether it should be retained or deleted.

8. Data Security

We use reasonable technical and organizational safeguards to protect information. Current technical measures include HTTPS, server-side secret handling, protected database access and bot protection. Access to personal information should be limited to what is needed to operate the website and handle requests.

No internet service or transmission can be guaranteed completely secure.

9. Your Rights and Requests

You may contact hello@guidesora.com to request access to, correction of, or deletion of your personal information, removal from early-access communications, or to exercise other rights available under applicable data-protection law.

Rights and any limitations depend on applicable law. We may need proportionate information to confirm that a request relates to you before acting on it. Please do not send identity documents unless we explain why they are necessary. Some records may need to be retained to meet legal obligations.

10. International and Service Provider Processing

Service providers may process information in jurisdictions different from your own, subject to their service arrangements and applicable data-protection requirements. This policy does not promise that information will remain in a particular country or data centre.

11. Children’s Privacy

The current early-access form is not designed to intentionally collect sensitive information from children. If a parent or guardian believes personal information was submitted inappropriately, they may contact hello@guidesora.com so we can review the situation and handle the information appropriately.

12. Changes to This Policy

We may update this policy as the website, our practices or applicable requirements change. We will publish the updated policy here and revise the last-updated date. Material changes will be communicated where required by applicable law.

13. Contact

For privacy questions or requests, email GuideSora at hello@guidesora.com.

See also our Terms of Service.